It includes tests, a README, and a clear MIT license, with an organization-backed repository matching the package. The long silence makes future fixes and compatibility support uncertain.
48%
Total Score
63
100
72
90
This is the package's only release, published over six years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.
The repository has had no commits and no active maintainers in the last three months, consistent with a project that has been inactive for over six years.
There are no open issues or pull requests, and no recent issue or pull request activity. This is consistent with a quiet project but does not prove active maintenance.
The repository has no stars or forks and only one watcher, offering little supporting evidence of broad adoption. Popularity is secondary to the stronger inactivity evidence.
Composer is used for build and dependency management, but no security scanning tool is configured. This is a transparency gap, though not enough on its own to make the package unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bloatless/endocore-http Version ~0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.